H3XA — Operational Evidence

TypeTool

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[SDelete](https://attack.mitre.org/software/S0195) is an application that securely deletes data in a way that makes it unrecoverable. It is part of the Microsoft Sysinternals suite of tools. (Citation: Microsoft SDelete July 2016)

Labels

tool

7 recorded

Relationships

uses

from APT29

Group

uses

from Cobalt Group

Group

uses

from FIN5

Group

uses

from Sandworm Team

Group

uses

to Data Destruction

Technique

uses

to File Deletion

Technique

uses

from Silence

Group

3 external

References

mitre-attack

S0195

open

SDelete

—

Microsoft SDelete July 2016

https://docs.microsoft.com/en-us/sysinternals/downloads/sdelete

open